middleware auth released